bind mac address to ip pool?

[Harald Dunkel]

On 02/08/10 18:27, Simon Hobson wrote:
> Reissom Beshir wrote:
> 
>> You do not need virtual-host class/subclass to key on host statements
>> in the pool statement.  The server considers host statements as
>> known-clients.
> 
> But known/unknown wasn't sufficient for the OPs requirements.
> 

Indeed. Unknown clients should not be allowed at all.
Here is the "good" configuration, if you are interested:


class "virtual-host" { match hardware; }
host squeeze {
	hardware ethernet 00:16:36:65:73:c4;
	ddns-hostname "squeeze";
	option host-name "squeeze";
}
subclass "virtual-host" 1:00:16:36:65:73:c4;
# please note this     ^^^

shared-network physicalnet1 {
	subnet 192.168.1.0 netmask 255.255.255.0 {
		option routers 192.168.1.1;
		option subnet-mask 255.255.255.0;
		option broadcast-address 192.168.1.255;
		pool {
			deny unknown-clients;
			deny members of "virtual-host";
			failover peer "dhcp-failover";
			range 192.168.1.231 192.168.1.254;
		}
		pool {
			allow members of "virtual-host";
			# the rest is denied automagically
			failover peer "dhcp-failover";
			ddns-domainname "dyn.mydomain.de";
			range 192.168.1.140 192.168.1.189;
		}
	}
}


Regards

Harri